{"id":"https://openalex.org/W7084135955","doi":"https://doi.org/10.1109/newcas64648.2025.11107115","title":"Firmware Pitfalls: On Compromising Flash Readout Protection in STM32 Devices","display_name":"Firmware Pitfalls: On Compromising Flash Readout Protection in STM32 Devices","publication_year":2025,"publication_date":"2025-06-22","ids":{"openalex":"https://openalex.org/W7084135955","doi":"https://doi.org/10.1109/newcas64648.2025.11107115"},"language":"en","primary_location":{"id":"doi:10.1109/newcas64648.2025.11107115","is_oa":false,"landing_page_url":"https://doi.org/10.1109/newcas64648.2025.11107115","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 23rd IEEE Interregional NEWCAS Conference (NEWCAS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Prasanna Ravi","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Prasanna Ravi","raw_affiliation_strings":["Nanyang Technological University,Temasek Laboratories,Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University,Temasek Laboratories,Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":null,"display_name":"Shivam Bhasin","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Shivam Bhasin","raw_affiliation_strings":["Nanyang Technological University,Temasek Laboratories,Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University,Temasek Laboratories,Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I172675005"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.59839357,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"108","last_page":"112"},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T12129","display_name":"Global Energy Security and Policy","score":0.048900000751018524,"subfield":{"id":"https://openalex.org/subfields/2100","display_name":"General Energy"},"field":{"id":"https://openalex.org/fields/21","display_name":"Energy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12129","display_name":"Global Energy Security and Policy","score":0.048900000751018524,"subfield":{"id":"https://openalex.org/subfields/2100","display_name":"General Energy"},"field":{"id":"https://openalex.org/fields/21","display_name":"Energy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12617","display_name":"Energy, Environment, and Transportation Policies","score":0.04010000079870224,"subfield":{"id":"https://openalex.org/subfields/2105","display_name":"Renewable Energy, Sustainability and the Environment"},"field":{"id":"https://openalex.org/fields/21","display_name":"Energy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13820","display_name":"SAS software applications and methods","score":0.030400000512599945,"subfield":{"id":"https://openalex.org/subfields/2204","display_name":"Biomedical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9571999907493591},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5430999994277954},{"id":"https://openalex.org/keywords/microcontroller","display_name":"Microcontroller","score":0.5015000104904175},{"id":"https://openalex.org/keywords/stm32","display_name":"STM32","score":0.4781999886035919},{"id":"https://openalex.org/keywords/debugging","display_name":"Debugging","score":0.43880000710487366},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4325999915599823},{"id":"https://openalex.org/keywords/flash","display_name":"Flash (photography)","score":0.43230000138282776}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9571999907493591},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.6834999918937683},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6557000279426575},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5430999994277954},{"id":"https://openalex.org/C173018170","wikidata":"https://www.wikidata.org/wiki/Q165678","display_name":"Microcontroller","level":2,"score":0.5015000104904175},{"id":"https://openalex.org/C2779096738","wikidata":"https://www.wikidata.org/wiki/Q7394773","display_name":"STM32","level":3,"score":0.4781999886035919},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.43880000710487366},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4325999915599823},{"id":"https://openalex.org/C2777526259","wikidata":"https://www.wikidata.org/wiki/Q221836","display_name":"Flash (photography)","level":2,"score":0.43230000138282776},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4162999987602234},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.41589999198913574},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.41040000319480896},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.40549999475479126},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.40059998631477356},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.38420000672340393},{"id":"https://openalex.org/C39217717","wikidata":"https://www.wikidata.org/wiki/Q1432354","display_name":"Hardware security module","level":3,"score":0.3580000102519989},{"id":"https://openalex.org/C22174128","wikidata":"https://www.wikidata.org/wiki/Q175869","display_name":"Microcode","level":2,"score":0.2800000011920929},{"id":"https://openalex.org/C2780771206","wikidata":"https://www.wikidata.org/wiki/Q3271761","display_name":"Safeguard","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C89836824","wikidata":"https://www.wikidata.org/wiki/Q160710","display_name":"Read-only memory","level":2,"score":0.2614000141620636},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.2513999938964844}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/newcas64648.2025.11107115","is_oa":false,"landing_page_url":"https://doi.org/10.1109/newcas64648.2025.11107115","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 23rd IEEE Interregional NEWCAS Conference (NEWCAS)","raw_type":"proceedings-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/214509","is_oa":false,"landing_page_url":"https://hdl.handle.net/10356/214509","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Conference Paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":2,"referenced_works":["https://openalex.org/W3143179398","https://openalex.org/W4256477176"],"related_works":[],"abstract_inverted_index":{"Firmware":[0],"plays":[1],"a":[2,59,111,116],"critical":[3,60],"role":[4],"in":[5,43,65,115,128],"the":[6,11,27,34,37,54,74,97,122],"supply":[7],"chain,":[8],"acting":[9],"as":[10],"foundational":[12],"software":[13],"that":[14],"controls":[15],"hardware":[16,98],"devices.":[17,141],"Thus,":[18],"modern":[19],"devices":[20],"support":[21],"special":[22],"security":[23,35,113,126],"features":[24],"to":[25,47,71],"protect":[26],"firmware.":[28],"In":[29],"this":[30],"paper,":[31],"we":[32,87],"investigate":[33],"of":[36],"Flash":[38],"Readout":[39],"Protection":[40],"(RDP)":[41],"mechanism":[42],"STM32":[44,139],"microcontrollers,":[45],"designed":[46],"safeguard":[48],"firmware":[49,93,102],"against":[50],"unauthorized":[51],"access":[52],"through":[53],"debug":[55],"interface.":[56],"We":[57],"uncover":[58],"vulnerability,":[61],"dubbed":[62],"\u201cRDP":[63],"Freeze,\u201d":[64],"RDP":[66,85],"level-1,":[67],"enabling":[68],"an":[69],"attacker":[70],"precisely":[72],"capture":[73],"microcontroller's":[75],"internal":[76],"state":[77],"(registers":[78],"and":[79],"RAM)":[80],"with":[81],"cycle-level":[82],"accuracy.":[83],"Exploiting":[84],"Freeze,":[86],"demonstrate":[88],"several":[89],"attack":[90],"vectors,":[91],"including":[92],"recovery":[94],"by":[95],"manipulating":[96],"CRC":[99],"accelerator":[100],"during":[101],"execution,":[103],"cryptographic":[104],"key":[105],"extraction":[106],"etc.":[107],"These":[108],"findings":[109],"highlight":[110],"significant":[112],"flaw":[114],"widely":[117],"deployed":[118],"microcontroller":[119],"family,":[120],"emphasizing":[121],"need":[123],"for":[124],"robust":[125],"measures":[127],"embedded":[129],"systems.":[130],"All":[131],"exploits":[132],"have":[133],"been":[134],"experimentally":[135],"validated":[136],"on":[137],"multiple":[138],"series":[140]},"counts_by_year":[],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}